Public bug reported: Imported from Debian bug http://bugs.debian.org/1138400:
Package: yubico-piv-tool Version: 2.7.2-1 Severity: normal Tags: sid control: affects -1 src:openssl User: [email protected] Usertags: openssl-4.0 OpenSSL 4.0 is in experimental. This package fails to build against it: | [ 55%] Building C object ykcs11/CMakeFiles/ykcs11.dir/openssl_utils.c.o | cd /build/reproducible-path/yubico-piv-tool-2.7.2/obj-x86_64-linux-gnu/ykcs11 && /usr/bin/cc -DCRYPTOKI_EXPORTS -DHAVE_EXPLICIT_BZERO -DOPENSSL_API_COMPAT=0x10000000L -I/build/reproducible-path/yubico-piv-tool-2.7.2/lib -I/build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/yubico-piv-tool-2.7.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -Wall -Werror -Wno-missing-braces -Wformat -Wformat-security -Wshadow -Wpointer-arith -Wmissing-prototypes -Wbad-function-cast -fstack-protector-all -Wno-pointer-sign -Wno-unused-result -I/usr/include -fvisibility=hidden -std=gnu11 -fPIC -DSTATIC -MD -MT ykcs11/CMakeFiles/ykcs11.dir/openssl_utils.c.o -MF CMakeFiles/ykcs11.dir/openssl_utils.c.o.d -o CMakeFiles/ykcs11.dir/openssl_utils.c.o -c /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c | /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c: In function ‘do_sign_empty_cert’: | /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c:178:30: error: passing argument 1 of ‘X509_NAME_add_entry_by_txt’ discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers] | 178 | X509_NAME_add_entry_by_txt(X509_get_issuer_name(*cert), "CN", MBSTRING_ASC, (const unsigned char*)cn, -1, -1, 0); | | ^~~~~~~~~~~~~~~~~~~~~~~~~~~ | In file included from /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_types.h:35, | from /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.h:34, | from /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c:31: | /usr/include/openssl/x509.h:1072:43: note: expected ‘X509_NAME *’ {aka ‘struct X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka ‘const struct X509_name_st *’} | 1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type, | | ~~~~~~~~~~~^~~~ | /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c:179:30: error: passing argument 1 of ‘X509_NAME_add_entry_by_txt’ discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers] | 179 | X509_NAME_add_entry_by_txt(X509_get_subject_name(*cert), "CN", MBSTRING_ASC, (const unsigned char*)cn, -1, -1, 0); | | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ | /usr/include/openssl/x509.h:1072:43: note: expected ‘X509_NAME *’ {aka ‘struct X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka ‘const struct X509_name_st *’} | 1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type, | | ~~~~~~~~~~~^~~~ | /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c: In function ‘do_parse_attestation’: | /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c:358:25: error: initialization discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers] | 358 | X509_EXTENSION *ext = X509_get_ext(cert, pos); | | ^~~~~~~~~~~~ | /build/reproducible-path/yubico-piv-tool-2.7.2/ykcs11/openssl_utils.c:362:28: error: initialization discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers] | 362 | ASN1_OCTET_STRING *oct = X509_EXTENSION_get_data(ext); | | ^~~~~~~~~~~~~~~~~~~~~~~ | cc1: all warnings being treated as errors | make[3]: *** [ykcs11/CMakeFiles/ykcs11.dir/build.make:138: ykcs11/CMakeFiles/ykcs11.dir/openssl_utils.c.o] Error 1 Full buildlog https://breakpoint.cc/openssl-rebuild/logs-4/attempted/yubico-piv-tool_2.7.2-1_amd64-2026-04-19T12:19:05Z Sebastian ** Affects: yubico-piv-tool (Ubuntu) Importance: Undecided Status: New ** Affects: yubico-piv-tool (Debian) Importance: Undecided Status: New ** Tags: ftbfs openssl-4.0 ** Bug watch added: Debian Bug tracker #1138400 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138400 ** Changed in: yubico-piv-tool (Debian) Remote watch: None => Debian Bug tracker #1138400 ** Tags added: ftbfs openssl-4.0 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2154946 Title: yubico-piv-tool: FTBFS with openssl 4.0 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/yubico-piv-tool/+bug/2154946/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
